CVE-2024-41248 - An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new subject entry

Back Back to CVE browser

HIGH

An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new subject entry

Published Aug 7, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.54%

Description

An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new subject entry.

Affected products

Vendor Kashipara Product Responsive School Management System Default
unknown
Affected
- 3.2.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Kashipara	Responsive School Management System	unknown	Affected 3.2.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-38985		Advisory
https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/Broken%20Access%20Control%20-%20Admin%20Master%20-%20Add%20Subject.pdf		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 7, 2024

Updated Aug 7, 2024

Reserved Jul 18, 2024

Link CVE-2024-41248

CISA Vulnrichment

Updated Aug 7, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-41248

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 7, 2024

Updated Aug 7, 2024

Link EUVD-2024-38985

GitHub

No data